Note
Support for SCIM is available for Uptrends Enterprise accounts.
This article explains what to expect when you enable SCIM provisioning between your identity provider (IdP) and Uptrends. It covers provisioning behavior, including operator and operator group management, access permissions, sync timing, and current limitations.
For setup steps, see Set up SCIM provisioning in Uptrends. For common questions, see SCIM provisioning FAQ.
Sync frequency
SCIM changes may not be applied to Uptrends instantly. The timing depends on when your IdP synchronizes with Uptrends. For example, Microsoft Entra ID SCIM provisioning typically runs about every 40 minutes.
Membership changes, updates, and deprovisioning all follow that same schedule.
Operators
Manual operators and SCIM-managed operators can exist in the same Uptrends account. SCIM creates and updates SCIM-managed operators from your IdP. Manual operators stay under your control in Uptrends unless SCIM adopts them.
How SCIM provisions operators
When your IdP provisions a new user, Uptrends creates a SCIM-managed operator labeled Managed by your IdP.
For SCIM-managed operators:
- Name, email, phone, language, and group membership are managed in your IdP and are read-only in the Uptrends web application.
- Other operator settings remain configurable in Uptrends, including time zone, off-duty schedules, and API users.
When those IdP-managed fields change in your IdP, Uptrends applies the updates on the next sync.
How SCIM deprovisions operators
When a user is unassigned from the Uptrends application in your IdP or marked inactive, Uptrends deprovisions and removes the SCIM-managed operator.
SCIM does not delete manually managed Uptrends operators. Only SCIM-managed operators can be removed by IdP deprovisioning.
How SCIM interacts with manual operators
Manual operators remain unchanged until your IdP provisions a matching user. If the IdP userName matches the existing operator’s email address, Uptrends adopts that operator into SCIM management instead of creating a duplicate. The operator is then labeled Managed by your IdP.
For example, if you create an operator manually in Uptrends and your IdP later provisions the same identity, Uptrends converts the existing operator to SCIM-managed. It does not create a second operator.
After adoption, IdP deprovisioning removes that operator from Uptrends.
Note
Manual Uptrends operators are not visible to the IdP during sync. The IdP does not compare your operator list. When the IdP provisions a user, Uptrends matches the
userNameto an existing operator email address.
Operator groups
Manual operator groups and SCIM-managed operator groups can also coexist. For easier user management, assign users to groups in your IdP and let SCIM sync those groups to Uptrends. When membership changes, your IdP should update the group, not individual user records. This matches typical Microsoft Entra ID behavior.
How SCIM provisions groups
When your IdP provisions a new group, Uptrends creates a SCIM-managed operator group labeled SCIM managed.
For SCIM-managed groups:
- Name and membership are read-only and managed by the IdP.
How SCIM updates group membership
When group membership changes in your IdP, Uptrends adds or removes operators in the matching SCIM-managed operator group on the next sync.
Membership rules:
- SCIM-managed operators can belong to both SCIM-managed groups and manually created Uptrends groups.
- You cannot add manual operators to a SCIM-managed group in the Uptrends web application. Membership for SCIM-managed groups is owned by the IdP.
How SCIM interacts with manual groups
SCIM does not delete manually managed Uptrends operator groups.
Unlike operators, SCIM does not adopt an existing manual operator group by display name. On first provision, the IdP typically creates a new SCIM-managed group. Your existing manual groups stay unchanged unless you map them before that first provision.
To map an existing Uptrends group to an IdP group, locate the IdP group’s ID. In Uptrends, paste that value into the operator group’s SCIM external ID field, or use the Uptrends API to update that field. Do this before the IdP provisions the group for the first time. When the IdP provisions that group, Uptrends adopts the existing group and converts it to SCIM-managed instead of creating a duplicate.
If you set the external ID after the IdP has already provisioned the group, Uptrends does not adopt the manual group. The SCIM-managed group created during provisioning remains, and your manual group stays unchanged.
Note
Mapping is one-to-one. You can map one IdP group to one Uptrends manual group. You cannot link one IdP group to two or more manual groups.
Built-in operator groups
The built-in Administrators and Everyone operator groups are not provisioned or managed through SCIM in the current release.
Permissions management
SCIM brings operators and operator groups into Uptrends, but it does not decide what those operators can do in the Uptrends web application. Permissions stay under Uptrends control so you can grant access to monitors, alerts, and other resources without changing your IdP configuration.
Use this split of responsibility:
- In your IdP, manage who exists and which groups they belong to.
- In Uptrends, after groups are synced, assign permissions to each group. For example, monitor access, alert management, or other authorizations your account supports.
Until you assign permissions in Uptrends, a synced group only defines membership. Group members receive product access from the permissions you configure on that group.
For more information, see Permissions overview.